Cybersecurity
Notorious Russian Ransomware Group ‘REvil’ Has Reappeared
- Group’s ‘Happy Blog’ shames companies with stolen data
- Site and REvil infrastructure is accessible on dark web
This article is for subscribers only.
The infamous criminal ransomware group behind the JBS SA cyberattack has returned to the dark web after vanishing this summer.
“REvil,” short for “Ransomware-Evil,” is among the most prolific cyber gangs to hold data for ransom. The group operates from Russia, according to cybersecurity firms and the U.S. government, and is accused of leading a flurry of attacks this year against companies and organizations, including JBS. The giant Brazilian meat supplier eventually paid an $11 million ransom.